CVE-2022-28937

CVE-2022-28937 affects FISCO-BCOS release-3.0.0-rc2. A malicious node can send an invalid proposal with an invalid header, causing normal nodes to stop producing new blocks and to stop processing new client requests. The issue impacts block production and request handling (availability) with a CV...

CVE-2022-28937

FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause normal nodes to stop producing new blocks and processing new clients' requests...

FISCO-BCOS 输入验证错误漏洞

FISCO-BCOS is an externally open-source, secure and controlled enterprise-grade financial blockchain underlying technology platform. A security vulnerability exists in FISCO-BCOS release-3.0.0-rc2. An attacker exploiting this vulnerability could cause normal nodes to stop generating new blocks an...

FISCO-BCOS 输入验证错误漏洞

FISCO-BCOS is an open source, secure and controlled enterprise-level financial blockchain underlying technology platform. A security vulnerability exists in FISCO-BCOS release-3.0.0-rc2, which can be exploited by an attacker to trigger an integer overflow and cause a denial of service DoS via an...

Huawei EulerOS: Security Advisory for uboot-tools (EulerOS-SA-2022-1498)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal nodes to change view excessively and stop generating blocks...

CVE-2022-26534

FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal nodes to change view excessively and stop generating blocks...

FISCO-BCOS 安全漏洞

FISCO-BCOS is an externally open source, secure and controlled enterprise-grade financial blockchain underlying technology platform. A security vulnerability exists in FISCO-BCOS, which originates from the use of a malicious node to cause a normal node to overly change its view and stop generatin...

SyliusGridBundle SQL注入漏洞

SyliusGridBundle is an open source e-commerce solution built from decoupled components with a robust API and the highest quality code.A SQL injection vulnerability exists in SyliusGridBundle versions prior to 1.10.1 and prior to 1.11-rc2, which stems from the fact that values added at the end of ...

PT-2022-18280

Name of the Vulnerable Software and Affected Versions CVRF-CSAF-Converter versions prior to 1.0.0-rc2 Description The issue allows for the inclusion of arbitrary local file content into the generated output document due to XML External Entities XXE. This can be exploited by an attacker to disclos...

CVE-2021-46359

FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks...

CVE-2021-46359

FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks...

CVE-2021-46359

CVE-2021-46359 affects FISCO-BCOS release-3.0.0-rc2. The issue is a denial-of-service vulnerability where some transactions may fail to commit, which could enable a double-spending scenario according to linked sources. The vulnerability is documented across multiple feeds (NVD/NVD-derived, CVE li...

CVE-2021-46359

FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks...

FISCO BCOS 代码问题漏洞

FISCO BCOS is a blockchain underlying platform. A code issue vulnerability exists in FISCO BCOS that stems from certain transactions in the product's operation failing to commit successfully. An attacker could use this vulnerability to cause a denial of service to the target. The following produc...

Race condition

A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. This flaw affects kernel...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 Apache Log4j 2 Vulnerable versions:...

PT-2021-7964 · Intel +3 · Intel(R) Ssd Tools +3

Name of the Vulnerable Software and Affected Versions: IntelR SSD Tools versions prior to mdadm-4.2-rc2 Description: The issue is related to a buffer overflow in the IntelR SSD Tools software, specifically in the mdadm utility, which is used for managing RAID arrays. This buffer overflow is cause...

CVE-2021-4001

A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. This flaw affects kernel...

OESA-2021-1316 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packe...